An IS auditor is evaluating a cybersecurity system that uses agentic AI for autonomous threat...

" Agentic AI " goes beyond simple detection; it can take actions (like shutting down a server) autonomously. The greatest risk is that the AI might misinterpret a legitimate but unusual business activity as a threat and trigger a " kill switch, " causing massive, unplanned downtime. This is a significant operational and availability risk. Auditors must ensure there are " guardrails " or a " human-in-the-loop " for high-impact actions. While reduced intervention (Option B) is a benefit, it is also the source of the risk that the auditor must mitigate through governance and control evaluation.